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DETAILED ACTION 
Continued Examination Under 37 CFR LI 14 

1 . A request for continued examination under 37 CFR 1.114, including the fee set forth in 
37 CFR 1.17(e), was filed in this application after final rejection. Since this application is 
eligible for continued examination under 37 CFR 1.1 14, and the fee set forth in 37 CFR 1.17(e) 
has been timely paid, the finality of the previous Office action has been withdrawn pursuant to 
37 CFR 1.114. Applicant's submission filed on 1 1/2/05 has been entered. 

Claim Rejections - 35 USC§102 

2. The following is a quotation of the appropriate paragraphs of 35 U.S.C 102 that form the 
basis for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 

(b) the invention was patented or described in a printed publication in this or a foreign country or in public use or on 
sale in this country, more than one year prior to the date of application for patent in the United States. 

3. Claims 1-2 are rejected under 35 U.S.C. 102(b) as being anticipated by Chou et al. (Chou, 
EP 0 636 962 A2). 

As per claim 1, Chou teaches method for enabling encryption and decryption of an initial version 
of a software product comprising the steps of: 

generating a first encryption key (col. 3 lines 44-50; encryption key); 

encrypting the initial version of the software product with said first encryption key to 
generate an encrypted initial software product (col. 2 lines 48-51; different encryption key 
encrypting a software); 
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splitting said first encryption key into first and second key portions (fig. 1 element 14 and 
16; Kl and K2) by (i) generating a first key portion of said first encryption key (col. 4 lines 1 1- 
14; generating first key portion: Kl)\ and (ii) calculating a second key portion by utilizing said 
first key portion and said first encryption key to generate said second key portion of said first 
encryption key such that the combination of said first key portion and second key portion form 
said first encryption key (col. 4 lines 19-24; generating the second key portion K2 from Kl and 
decryption key K, decryption key K/encryption key could not decrypt the software without first 
calculation the second potion and combining the calculated second portion with the received 
first portion)', 

providing said first key portion and said second key portion and said encrypted initial 
software product for use in a hardware product (col. 3 lines 49-coI. 4 lines 49; encrypted 
software, Kl and K2 are provided to a user from processing center); 

combining said first key portion and said second key portion to provide said first 
encryption key in said hardware product (col. 4 lines 45-49, and col. 5 lines 8-9; combing Kl and 
K2)\ and 

utilizing said first encryption key to decrypt said encrypted initial software product in 
said hardware product (col. 5 lines 51-54, and col. 6 lines 25-28; using decryption key/encryption 
key to decrypt encrypted software). 

Regarding claim 2, Chou discloses the method wherein said step of generating a first encryption 
key utilizes a ransom number generator to generate said first encryption key (col. 3 lines 49-col. 
4 lines 14). 
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Claim Rejections -35 USC § 103 

4, The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 102 of this title, if the differences between the subject matter sought to be patented and the prior art are 
such that the subject matter as a whole would have been obvious at the time the invention was made to a person 
having ordinary skill in the art to which said subject matter pertains. Patentability shall not be negatived by the 
manner in which the invention was made. 

5. Claims 3-4 are rejected under 35 U.S.C. 103(a) as being unpatentable over Chou et al. 
(Chou, EP 0 636 962 A2) in view of Rasmussen et al. Patent Number: 5,301,247). 

Regarding claim 3 Chou teaches the method wherein said step of calculating a second key 
portion and combining the first key portion and the first encryption key/decryption key to 
calculate the second key portion (col. 4 lines 10-26). Chou does not disclose an "exclusive or" 
operator to combine the keys to calculate second key portion. 

However using an "exclusive or" operator to combine key portions is very well known 
and Rasmussen teaches it (see, fig. 4 element 144 and col. 8 lines 40-48; xoring first portion of 
key (DEK1) with second portion (DEK2) of key to form encryption key (DEK)). 

Therefore it would have been obvious to one having ordinary skill in the art at the time of 
the invention was made to employ the teachings of excusive or within the system of Chou to 
combine the first encryption key and first key portion because operator exclusive or necessary 
for combining. One would have been motivated to do so to combine the first splitted portion of 
the key with the encryption key/decryption key. 
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Regarding claim 4 Chou and Rasmussen disclose all the subject matter as described above. In 
addition Rasmussen discloses wherein said step of combining said first key portion and said 
second key portion utilizes an "exclusive or" logic operation to combine said first key portion 
and said second key portion to provide said first encryption key (see, fig. 4 element 144 and col. 
8 lines 40-48; xoring first portion of key (DEK1) with second portion (DEK2) of key to form 
encryption key (DEK)). The rational for combining are the same as claim 3 above. 

6. Claims 5-6 are rejected under 35 U.S.C. 103(a) as being unpatentable over Chou et al. 
(Chou, EP 0 636 962 A2) in view of Kitajima et al. (Kitajima, Patent No.: US 6,823,069 Bl). 

As per claim 5, Chou teaches the method further enabling of said first encryption key to provide 
a second encryption key to secure a different version of the initial software product, further 
comprising the steps of: 

generating the second encryption key (col. 3 lines 44-50; encryption key); 

encrypting the different version of the initial software product with the second encryption 
key to provide an encrypted different version of the software product (col. 2 lines 48-51; 
different encryption key encrypting a software); 

combining the first encryption key and the second encryption key to provide a third key 
portion (col. 4 lines 19-24; combining Kl and decryption key /encryption key); 

installing said third key portion and the encrypted different version of the software 
product in said hardware product (col. 2 lines 2-9 and col. 4 lines 1 1-26; generating first key and 
sending/storing the generated first key to the external central processing system); 
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combining said third key portion and said second key portion to generate a fourth key 
portion in said hardware product (col. 4 lines 45-49, and col. 5 lines 8-9; combing Kl and K2)\ 

combining the first key portion and the fourth key portion to provide said second 
encryption key in said hardware product (col. 4 lines 19-24); and 

using the second encryption key to decrypt the encrypted different version of the software 
product (col. 4 lines 45-49, and col. 5 lines 8-9; combing Kl and K2). 

Chou fails to teach an update of the keys. 

However Kitajima discloses dividing encrypting key into a first half portion and a second 
half portion and periodically updating/changing keys and encryption algorithm to securely 
protect cryptograms against unauthorized people (col. 1 1 lines 1-10). 

Therefore it would have been obvious to one having ordinary skill in the art at the time of 
the invention was made to employ the teachings of updating keys within the system of Chou 
because it would allow a secure data/message/information transmission (col. 1 1 lines 1-10). One 
would have been motivated to update the encryption key and the key portions to enhance 
security by making the keys unpredictable. 

As per claim 6, Chou, and Kitajima disclose all the subject matter as described above. In addition 
Chou discloses the method wherein said step of generating a first encryption key utilizes a 
ransom number generator to generate said first encryption key (col. 3 lines 49-col. 4 lines 14). 

7. Claims 7-8 are rejected under 35 U.S.C. 103(a) as being unpatentable over Chou et al. 
(Chou, EP 0 636 962 A2) and Kitajima et al. (Kitajima, Patent No.: US 6,823,069 Bl), and 
further in view of Rasmussen et al. Patent Number: 5,301,247), 
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As per claim 7, Chou and Kitajima teach all the subject matter as described above. Chou and 
Kitajima fail to disclose exclusive or operator. 

However Rasmussen using an "exclusive or" operator to combine key portions is very 
well known and Rasmussen teaches it (see, fig. 4 element 144 and col. 8 lines 40-48; xoring first 
portion of key (DEKI) with second portion (DEK2) of key to form encryption key (DEK)). 

Therefore it would have been obvious to one having ordinary skill in the art at the time of 
the invention was made to employ the teachings of excusive or within the combination system of 
Chou and Kitajima to combine said first encryption key and said second encryption key and 
generate said third key portion because operator exclusive or necessary for combining. One 
would have been motivated to do so to combine first encryption key and said second encryption 
key. 

As per claim 8, Chou, Kitajima, and Rasmussen teach all the subject matter. In addition the 
combination teaches wherein said step of providing said second encryption key utilizes an 
"exclusive or" logic operation to combine said first key portion and said fourth key portion to 
provide said second encryption key (see, Rasmussen fig. 4 element 144 and col 8 lines 40-48; 
xoring first portion of key (DEKI) with second portion (DEK2) of key to form encryption key 
(DEK) and Chou col 4 lines 10-26). The rational for combining are the same as claim 7 above. 
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8. Claim 9 is rejected under 35 U.S.C. 103(a) as being unpatentable over Chou et al. (Chou, 
EP 0 636 962 A2), and Kitajima et al. (Kitajima, Patent No,: US 6,823,069 Bl) and further in 
view of Vincent Pub. No.: US 2004/0015953 Al. 

As per claim 9, Chou and Kitajima disclose all the subject matter as described above. Chou and 
Kitajima fail to disclose wherein said initial version of software product and said different 
version of said initial version of said software product are non-sequential versions. 
However Vincent discloses updating required versions out of multiple different versions of 
software products in non-sequential order (fig. 9 and par. 0071; updating component B from 
version 4 to version 6 and updating full component of D and E to version 1 and 2 respectively). 

Therefore it would have been obvious to one having ordinary skill in the art at the time of 
the invention was made to employ the teachings of Vincent within the combination system of 
Chou and Kitajima because it would save time (par. 0015). One would have been motivated to 
update non-sequential version of software because it would allow a minimal time to download 
specific software components in contrast to conventional methods of updating software (par. 
0015). 

9. Claim 10 is rejected under 35 U.S.C. 103(a) as being unpatentable over Chou et al. 
(Chou, EP 0 636 962 A2) and Kitajima et al. (Kitajima, Patent No.: US 6,823,069 Bl), and 
further in view of Mizikovsky Patent No.: US 6,853,729 BL 

Regarding claim 10, Chou and Kitajima disclose all the subject matter as described. Chou and 
Kitajima fail to teach wherein the second encryption key is non-sequential with said first 
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encryption key. However Mizikovsky teaches an update key which is non-sequential with said 
first encryption key (col. 8 lines 21-43 and fig. 4; update key being different from new 
key ...generated in using RAND numbers). 

Therefore it would have been obvious to one having ordinary skill in the art at the time of 
the invention was made to combine the teachings of Mizikovsky within the combination system 
because it would enhance security. One would have been motivated to incorporate the teachings 
of updating keys in non-sequential order to prevent unauthorized device from learning 
encryption keys and perform unauthorized decryption of content. 

10. Claims 1 1-12 are rejected under 35 U.S.C 103(a) as being unpatentable over Chou et al. 
(Chou, EP 0 636 962 A2) in view of Chan Patent Number: 5,150,407. 

As per claim 1 1 a method for providing for the security of encryption keys for encryption and 

decryption of an initial version of a software product provided by a provider to a user of a 

hardware product, said method comprising: 

providing a first encryption key (col. 3 lines 44-50; encryption key)\ 

encrypting the initial version of the software product with said first encryption key to 

generate an encrypted initial software product (col. 2 lines 48-51; different encryption key 

encrypting a software)', 

splitting said first encryption key into first and second key portions (fig. 1 element 14 and 

16; Kl andK2) by (i) providing a first key portion (col. 4 lines 11-14; generating first key 

portion: Kl)\ and (ii) utilizing said first key portion and said first encryption key to calculate a 
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second key portion of said first encryption key such that the combination of said first and second 
key portions form said first encryption key (col. 4 lines 19-24; generating the second key portion 
K2 from Kl and decryption key K, decryption key K/encryption key could not decrypt the 
software without first calculation the second potion and combining the calculated second portion 
with the received first portion)] 

storing said first key portion in storage means external to the hardware (col. 2 lines 2-9 
and col. 4 lines 1 1 -26; generating first key and sending/storing the generated first key to the 
external central processing system) ', 

storing said encrypted software product in a further memory means in the hardware 
product (col. 1 lines 40-col. 2 lines 9; stored software distribution); 

combining said first key portion and said second key portion in the hardware product to 
provide said first encryption key (col. 4 lines 45-49, and col. 5 lines 8-9; combing Kl and K2)\ 
and 

decrypting said encrypted initial software product with said first encryption key (col. 5 
lines 51-54, and col. 6 lines 25-28; using decryption key /encrypt ion key to decrypt encrypted 
software). 

Chou teaches encrypted software with encryption key, encryption key is divided in to two 
portions, Kl and K2, and the encrypted software and Kl is stored on CD and distributed to user, 
the other portion of the key, K2, calculated on the processing center is transmitted to user 's 
device to decrypt the encrypted software by combining Kl and K2 (col. 2 lines 48-57 and col. 4 
lines 10-31). However Chou does not explicitly disclose storing said second key portion 
separately from said first key portion in a tamper proof memory means in the hardware product; 
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However Chan teaches encrypting digital data using encryption key, dividing encryption 
key in to two portions (col. 5 lines 44-45) and storing the portions of the key in two different 
storage devices (col. 5 lines 45-47, and col. 9 lines 6-14), and combining the portions of the keys 
in order to decrypt the encrypted digital data (col. 9 lines 28-30). 

Therefore it would have been obvious to one having ordinary skill in the art at the time of 
the invention was made to employ the teachings of Chan within the system of Chou because it 
would enhance security (col. 5 lines 17-63). One would have been motivated to do so for secure 
use of decryption keys and data protection and/or the user cannot access the other portion easily. 

Regarding claim 12, Chou and Chan teach all the subject matter as described above. In addition 
Chou discloses the method wherein said step of generating a first encryption key utilizes a 
ransom number generator to generate said first encryption key (col. 3 lines 49-col. 4 lines 14). 

11. Claims 13-14 are rejected under 35 U.S.C. 103(a) as being unpatentable over Chou et al. 
(Chou, EP 0 636 962 A2) and Chan Patent Number: 5,150,407 and further in view of Rasmussen 
et al. Patent Number: 5,301,247). 

As per claim 13, Chou and Chan teach the method wherein said step of calculating a second key 
portion and combining the first key portion and the first encryption key/decryption key to 
calculate the second key portion (Chou col. 4 lines 10-26). Chou does not disclose an "exclusive 
or" operator to combine the keys to calculate second key portion. 
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However using an "exclusive or" operator to combine key portions is very well known 
and Rasmussen teaches it (see, fig. 4 element 144 and col. 8 lines 40-48; xoring first portion of 
key (DEK1) with second portion (DEK2) of key to form encryption key (DEK)). 

Therefore it would have been obvious to one having ordinary skill in the art at the time of 
the invention was made to employ the teachings of excusive or within the combination system of 
Chou and Chan to combine the first encryption key and first key portion because operator 
exclusive or necessary for combining. One would have been motivated to do so to combine the 
first splitted portion of the key with the encryption key/decryption key. 

As per claim 14, Chou, Chan, and Rasmussen teach all the subject matter as described above. In 
addition the combination teaches wherein said step of combining said first key portion and said 
second key portion utilizes an "exclusive or" logic operation performed by said hardware product 
(Rasmussen fig. 4 element 144 and col. 8 lines 40-48; xoring first portion of key (DEK1) with 
second portion (DEK2) of key to form encryption key (DEK) and Chou col 4 lines 10-26) The 
rational for combining are the same as claim 13 above. 

12. Claims 15-16 are rejected under 35 U.S.C. 103(a) as being unpatentable over Chou et al. 
(Chou, EP 0 636 962 A2) and Chan Patent Number: 5,150,407 and further in view of Kitajima et 
al. (Kitajima, Patent No.: US 6,823,069 Bl). 

As per claim 15, Chou and Chan teach all the subject matter as described above. In addition the 
combination discloses the method further enabling security of said first encryption key and 
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providing a second encryption key for encrypting a different version of the initial software 
product, further comprising: 

generating the second encryption key (Chou col. 3 lines 44-50; encryption key); 

encrypting the different version of the initial software product with said second 
encryption key to provide an encrypted different version of the initial software product (Chou 
col. 2 lines 48-5 1 ; different encryption key encrypting a software); 

combining said first encryption key and said second encryption key to provide a third key 
portion (Chou col. 4 lines 19-24; combining Kl and decryption key /encrypt ion key); 

installing said third key portion in said tamper proof memory means (Chan col. 5 lines 
45-47, and col. 9 lines 6-14); 

installing said encrypted different version of the initial software product in said further 
memory means in the hardware product (Chou col. 1 lines 40-col. 2 lines 9; stored software 
distribution); 

combining said third key portion and said second key portion to generate a fourth key 
portion in the hardware product (Chou col. 4 lines 45-49, and col. 5 lines 8-9; combing Kl and 
K2)\ 

combining said first key portion and said fourth key portion to provide said second 
encryption key in the hardware product (Chou col. 4 lines 19-24); and 

using said second encryption key in the hardware product to decrypt the encrypted 
different version of the initial software product (Chou col. 4 lines 45-49, and col. 5 lines 8-9; 
combing Kl and K2). The rational for combining are the same as claim 1 1 above. 

Chou and Chan fail to teach an update of the keys. 
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However Kitajima discloses dividing encrypting key into a first half portion and a second 
half portion and periodically updating/changing keys and encryption algorithm to securely 
protect cryptograms against unauthorized people (col. 1 1 lines 1-10). 

Therefore it would have been obvious to one having ordinary skill in the art at the time of 
the invention was made to employ the teachings of updating keys within the combination system 
of Chou and Chan because it would allow a secure data/message/information transmission (col. 
1 1 lines 1-10). One would have been motivated to update the encryption key and the key 
portions to enhance security by making the keys unpredictable. 

As per claim 16, Chou, Chan, and Kitajima teach all the subject matter as described above. In 
addition Chou discloses the method wherein said step of generating a first encryption key utilizes 
a ransom number generator to generate said first encryption key (col. 3 lines 49-col. 4 lines 14), 

13. Claims 17-18 are rejected under 35 U.S.C. 103(a) as being unpatentable over Chou et al. 
(Chou, EP 0 636 962 A2), Chan Patent Number: 5,150,407 and Kitajima et al (Kitajima, Patent 
No.: US 6,823,069 Bl) and further in view of Rasmussen et al. Patent Number: 5,301,247. 

As per claim 17, Chou, Chan, and Kitajima disclose all the subject matter as described above. 
Chou, Chan and Kitajima fail to disclose exclusive or operator. 

However Rasmussen using an "exclusive or" operator to combine key portions is very 
well known and Rasmussen teaches it (see, fig. 4 element 144 and col. 8 lines 40-48; xoring first 
portion of key (DEK1) with second portion (DEK2) of key to form enciyption key (DEK)). 
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Therefore it would have been obvious to one having ordinary skill in the art at the time of 
the invention was made to employ the teachings of excusive or within the combination system of 
Chou, Chan and Kitajima to combine said first encryption key and said second encryption key 
and generate said third key portion because operator exclusive or necessary for combining. One 
would have been motivated to do so to combine first encryption key and said second encryption 
key. 

As per claim 18, Chou, Chan, Kitajima, and Rasmussen disclose all the subject matter as 
described above. In addition the combination teaches wherein said step of combining said first 
key portion and the fourth key portion to provide said second encryption key utilizes an 
"exclusive or" logic operation (see, Rasmussen fig. 4 element 144 and col. 8 lines 40-48; xoring 
first portion of key (DEK1) with second portion (DEK2) of key to form encryption key (DEK) and 
Chou col 4 lines 1 0-26). The rational for combining are the same as claim 17 above. 

14. Claims 19 are rejected under 35 U.S.C. 103(a) as being unpatentable over Chou et al. 
(Chou, EP 0 636 962 A2) and Chan Patent Number: 5,150,407 and further in view of Kitajima et 
al. (Kitajima, Patent No.: US 6,823,069 Bl) and further in view of Vincent Pub. No.: US 
2004/0015953 Al. 

Regarding claim 19, Chou, Chan, and Kitajima disclose all the subject matter as described. 
Chou, Chan and Kitajima fail to disclose wherein said initial version of software product and 
said different version of said initial version of said software product are non-sequential versions. 
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However Vincent discloses updating required versions out of multiple different versions 
of software products in non-sequential order (fig. 9 and par. 0071; updating component B from 
version 4 to version 6 and updating full component of D and E to version J and 2 respectively). 

Therefore it would have been obvious to one having ordinary skill in the art at the time of 
the invention was made to employ the teachings of Vincent within the combination system of 
Chou and Kitajima because it would save time (par. 0015). One would have been motivated to 
update non-sequential version of software because it would allow a minimal time to download 
specific software components in contrast to conventional methods of updating software (par, 
0015). 

15. Claim 20 is rejected under 35 U.S.C. 103(a) as being unpatentable over Chou et al. 
(Chou, EP 0 636 962 A2), Chan Patent Number: 5,150,407 and Kitajima et al. (Kitajima, Patent 
No.: US 6,823,069 Bl) and further in view of Mizikovsky Patent No.: US 6,853,729 Bl. 

Regarding claim 20, Chou, Chan, and Kitajima disclose all the subject matter as described. 
Chou, Chan and Kitajima fail to teach wherein the second encryption key is non-sequential with 
said first encryption key. However Mizikovsky teaches an update key which is non-sequential 
with said first encryption key (col. 8 lines 21-43 and fig. 4; update key being different from new 
key ...generated in using RAND numbers). 

Therefore it would have been obvious to one having ordinary skill in the art at the time of 
the invention was made to combine the teachings of Mizikovsky within the combination system 
because it would enhance security. One would have been motivated to incorporate the teachings 
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of updating keys in non-sequential order to prevent unauthorized device from learning 
encryption keys and perform unauthorized decryption of content. 

Conclusion 

1 6. The prior art made of record and not relied upon is considered pertinent to. applicant's 
disclosure US 6,966,002 Bl : Torrubia-Saez discloses decryption key is splitted into two parts, of 
which one part is calculated in the server, and the other pari is calculated in the users computer 
(col 18 lines 40-57), 

Pub. No.: US 2001/0001876 Al : Morgan et al discloses a well-known splitting key 
method i.e. splitting key in to parts. 

Please see PTO 892 form for further prior art of record. 

17. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Eleni A. Shiferaw whose telephone number is 571-272-3867. 
The examiner can normally be reached on Mon-Fri 8:00am-5:00pm. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Ayaz R. Sheikh can be reached on 571-272-3795. The fax phone number for the 
organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). 
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